Since we set RTC in the Nix build it's likely that any passwords have
expired since the image generation RTC time.
Ideally this should be applied in autounattend.xml but it didn't work
out either as FirstLogonCommands or as a command in the specialize pass.